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1 TITLE OF TBE INVENTION 

Apparatus of a flexible protection of ISMA media streams u^nng MPEG-4 IPMP 
Exten»on 

2 WHAT IS CLAIMED IS: 

O) Apparatus of a flexible protection of ISMA media streams using MP^^ mvff 
^ ^ on ISMA coLit provider side, comprising the following steps of. 

Embed Tool List Descriptor into lOD to indicate a list of IPMP tools re(paired to 
process the content 

one of the tools specified in the Tool List has a tool ID which was assigned to 
ISMACryp decryption tool. 

One of the took specified in the Tool List has a tool ID which was assigned to 
KMS (Key Management System) tool. 

Presence of any one of the above mentioned two tools dgnals the presence of 
ISMACryp protection. 

^Sn uSg Tod Ust to lOD to cidm (1). Brter ccm,n>m tl» fc"«»™e 
Steps of. 

Embed IPMP Descriptor Pointer in the ES Descriptor of a media stream to 
mdicate the media stream is protected. 

The IPMP Descriptor referenced by the above said BPMP Descriptor Pointer has a 
tool ID of the ISMACryp decryption tool. 
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(3) Apparatus of a flexible protection of ISMA media streams using MreG^4 IPMP 
Stension, on ISMA content provider side, comprising the followmg steps of: 

Carry ISMACryp parameters in ISMACryp_Data which extends from 
IPMP_Data_Baseaass. 

Cany ISMACryp_Data in IPMP Descriptor which is subsequently carried in OD. 

(4) Apparatus of a flexible protection of ISMA media streams using MPEG-4 IPMP 
Extenaon, on ISMA content provider side, comprising the followmg steps of: 

Carry ISMACryp paiametera in ISMACrypJData which extends from 
IPMP_Data_BaseClass. 

Carry ISMACrypJData in IPMP_Message which is subsequentiy carried in IPMP 
Stream. 

3 DETAILED DESOOPTION OF THE INVENTION 
3.1 Tadostrial Field of UtiUzation 

The presented inventfon aims to provide MPEG-4 IPMP Brtension *° 
the ISMA protection framework. With the given mvennon adopted, ISMA protertion 
frameworic is able to achieve intetopembiUty with MPEG^ IPMP Extension compatible 
receiveis. 

3^ Bacl^;roand and Prior Art 

For sevend years, the promise of deUvering video and audio over the Internet tos been 
widely promoted in the media content distribution mdustry. Many standard groups have put 
r^^KuLs efforts to provide solutions towards this issue. Internet Stt«mmg Med« 
Alliance (ISMA) is one of such groups, ft addresses this need by settmg forth a framewc«k 
for the use of existing open standards that vendors can use to build interoperable video and 
audio systems for use in IP frameworic and Internet. Its specification assumes the use of 
existing MPEG technologies and mainly focus on MPEG-4 technolo^es aj tiie current stage, 
though fiiture adaptation and revisions may inctade MPEG.2 and MPEG-7 technologies. 

ISMA also defines a cryptographic fi^eworic, namely ISMACryp for ISMA media 
streams This framework is extensible to new media encodings, can be upgraded to new 
cryptographic transfonns. and is applicable to a variety of key management, seciuity, or 
diSal ridits managemem (DRM)) systems. It also defines a default enaryptton of meja 
streams and authentication of media messages for ISMA specification. Figure.1 gives the 
architecture diagram of ISMACrpt protection over tiie ISMA framework. 

As ISMA declares, two types of receivers are targeted, namely. ISMA-only recovers and 
MPEG system-capable receiveis. "ISMA-only" receivers are defined here as recewers that 
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.r. not MPEG^ system capable, i.e.. cannot process the MPECM signalUng and control 
Sr^)^^ - accoWany any MPEG^^-^.gia ^^On^ 
r^ntrarv «MPEG svstem-capable receivers" can process toe MPtO-* "fy^ 
SSon^lell^SlA Velated infonnation. TTie interoperability xvith MPEG system- 
SS^^^^ is acW^ through MPEG lOD (Initial Object Description) that conv^ 
"Ca^SlletS^^MPEG-system signalling. ThelOD is included as ab.naxy SDP 
(Session Description Protocol) attribute, i .e., SDP lOD. 

TCM Arnm is also aonlicable to both types of receivers. It extends the binary lOD imide the 

^Sling: It proviSw "Minimal" and "Base" signalhng parameters of the SDP lOD 
to^cSsreiiviinteroperability^MPEG^IPMP system. 

tfte eumait ISMACryp defined extension to lOD is not complete and not 
* J^i^MP Extension standard. TTus i^s the ISMA stre^ 

^Sir^rrSS^ recoenizable by MPEG-* IPMP Extension compatible receiver. For 
Zno^ lIlS^ S^^^^the presence of IPMP_Descriptor in lOD is u^ 
K^^rotectioa Ho^er According to MPEG.4 IPMP extension^ the 
?o^ D^^oSd^pi^ented in the lOD if there is ^^^^ P^?^^^ 
tac«ni^S^ inconsistences may impair the ISMA framework's mteroperability 
with MPEG-4 IPMP Extaision compatible receivers. 

33 Problem to be solved 

This invention tries to solve the follov«dng problems: 

ISMACryp standard defines the signalling of ISMACryp prote^o° »>y using ]VffB&4 
m^S^Ae extension of lOD in«de SDP. The presence of IPMP.Descnptor m lOD 
^^^d^ers that this media stream is protected. For MPEG ffMP non-compat*te 
^er tii^ AeTallov^ to handle the streams in their proprietary V^t appio^^ 
SmSy ignore the streams. However, MPEG-I IPMP Extension standard d^es 

]FMP_Desaiptor. 

Furthermore, in order to enable MPEG-4 IPMP Extension compatible recovers «> je^ive 
la^SSi data, e g., encryption information. KMS configuration. whid» accon«paity the 
SS^iSStSc^ L2d extends the lPMP_Descriptor Jn lOD with a self-defi^ 
Descriptorbased on the MPEG4 IPMP standard H<f ^'^^j^^.S?^ 
S^Sfof MPEG-4 IPMP standa«i. the ^««ax of lOD has changed bj^'^^^ 
^h the old version that ISMACryp standard based on. Tte bnrigs the P«>Wem toe 
KMA retted data carried m IPMP context might not be recogmzable by receivers 
c^atible with latest MPEG4 IPMP Extension standard. In order to keep consistency of 
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latest MPEG-4 IPMP Extension standard wWle mmimizes the to KMA ab^ 

SS^Steis. there requires a new mechanism Aat is able to carry ISMA rel^^ 

EPMP Extension standard and the mechamsm is backward 
compatible with previous version of MPEG^ IPMP Extension standard. 

3.4 Means €f Solving ttie Problems 

Tn address the sisnalling problems, this invention defines a signalling mechanism to signal 
£ ^cTof JmS piotSon in MPEG Initial Object Descriptor (lOD). The tool 
S KM]? De^pto^^e utilized to signal the protectioa This means is compauble 
^th L ^ tlPEG-4 IPMP Exten«on standard, m^nwhile Provides m^ 
^Sop^Oity with MPEG-system-capable ISMA recmer. It also provries a flexible way 
to identify took required to play the content. 

This mventionalsodefinesthe mechanisms of canyingandxo^^ 

iwrameters to MPEG-system-capable ISMA receiver. An ISMA speafic KMACo^^ 

S^^ndedfrom MPEG-4 IPMP Extension defined IPMPJJata.BaseOifiS to cany 

W'a^^ This la^^ 
IPMP Stream in onJer to conform to MPEG4 IPMP Extension standard. 

3.^ Operation of tiie Invoitioii 

Within ISMA framewoA. lOD and OD are constnicted. IPMP Tool list Descriptor are 
^SdS il lOD. aiSl IPMP Descriptor Pointers and IPMP Descaptots are embedded 
into lOD and OD if there is ISMACryp protection preseait. 

The lOD and OD are conveyed to the ISMA receiver that understai^ ^^Jp^^l fl 
lOD signaling. The receiver analyzes lOD and OD. Upon detecUon of ^ Jo?* ^ 
Se receiver awSe that there is ISMACryp protection present Upon ^et^°»^^ 
oLfiptor Pointer and IPMP Descriptor, the recdver can be aware of which steeam is 
protected by which tod. 

Withm ISMA framework, when a stream is protected by ISMACryp. the ISMACryp 
^^etS^r example, cipher identifier) can be c^ried in KMACryp.^^j ^tm 
Descriptor or IPMP Stream, the carriage of the parameters is MPEG-4 IPMP 
Extension compliant. 

At the receiver side^ the parameters for ISMACryp can be retrieved from IPMP Desaiptor 
^SSfeam int MPEG-4 IPMP Extension compatible way. The parameters candienbe 
used to configure ISMACryp derayption tool 



3.6 Embodiments 

3.6.1 IPMP Extension Signaling 
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^ 4 Tc^>fAr™n <a,n«orts SDP lOD signaling for ISMA-only and MPEG recovers. 

S^SS:SjSy^P ^%iing parameters but the SDP lOD 
^ W aTMPEG receiver 'that the stream has ISMACryp protec^ons 

Sa^^g)- The KMS MAY signal the ISMACryp signalmg usmg only IPMP 
signaling in the SDP lOD (Base IPMP signahng). 

The present document provides the syntax that is compatible with MPEG4 TPT^ 
eS<So^ Wth minimum effort. ISMACryp can easUy achieve compatobility with 
iSi Bctension^ vtoch provides a more flexible protection scheme. 

Minimal IPMP-X Signaling 

IPMP Extension defines an IPMP Tool LbtDes^iptor mlOD^WA iden^^^ 
rl«,.ir«.H IPMP Tools in following procession. . Accordmg to MPEG-4 IPMP ertension, 
S^^l SlS^r Luld be presented in the lOD if there is IPMP protecUon. So 
SrAfliiSS^XSignalin/we suggest to use IP^ 
instead of the IPMP Descriptor to achieve this purpose. 

According to the current ISMACryp specification, ^^ch ^^^^^^^^^^^JJ^^ 
information transportation, at least two tools Should be pr««mt«i m NffEG 
T^Uist Descriptor. The first one is the KMS tool, and the other is the ISMA 

^ti^^t T^^ce of ISMACryp tool in MPEG IPMP Tool L.st signals the 

ISMACryp protectioa 



An example of the Tool List Descriptor with ISMACryp tools is given below. 




13 



14 



15 



128 



IPMPJToollD 



The value assigned by eadi service 
provider to th^r KMS tool 




128 



IPMPJToollD 



1 



isAltGroup 



isParametric 



The value assigned to the ISMA 
decryption tool_ 
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rox/ro T^i ^ \^ \^ denicted in MPEG-4 IPMP Extension content structure shown in 

? li^ ffS tSi ListM not only feciUtates the signaling of the present of 

♦X^rS; thetool Ust can be identified in three ways. The first is to use a fix^ 128 bit 
^^t^ (2 2^^e assigned by a re^stiation authority. Hie ^econd^ to^alist 
S ffNff Toolis to indicate the Tools that are equivalent ahematives <^^>; 
Bv dofcgso atenninal can have more flexibaityto choose rts own ool. The last one is to 
use to P^^c description to describe a criteria that an IPMP tool has to meet i2A\ m 
;SX^Sial can'have mo.e freedom to choose a tool to perform the requned 

fiinction 

Base IPMP-X Sigoaling 

vnr the MPEGwsvstems^pable receiver, more IPMP information is required for MP 
Sat^^^S ?^towing IPMP-X signaling SHOULD be adopted as the basis 
for^^^ibte MPEG IPMP Extension signaling. .Tog«*«^^*^^^if 
S^X^ hi^section 2. th^ provide the base mformation required by the MPEG 
^™Sre receiver. For encrypted elementary streams, then oMxesponding ES 
desoiptors MUST contain the foUowmg IPMP J5escnptorPorater 




IPMP Pes cri ptorPointer 



IPMP DescriotorPointertag 10 



descri ptor size 



IPMP DescriPtorlD 



OxFF 




Qx00D2 / 0x0003 
0x0000 



The concept of this IPMP Extension protection signaling is shown ""T'^J-.J^.. 
prSe^i^f this descriptor pointer (3.1 and 3.2) in an ES.Descnptor ^^K^^Aat Ae 
^ associated with this descriptor is sul^ectto protechon and ^f^**^ 
m^Tool specified in the referenced IPMP_Descnptor (3 .3 and 3.4). This referenced 
IPMP JJescriptor should be carried ui the Object Descnptor. 



Descriptor Name 



Field 
No. 



Size in 
Bits 



8 



8 



Field Name 



value 



iPMP Descriptor 



iPi^P Descriptor tag 



descriptor size 



11 
23 



6 
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3 
4 
5 

6 


8 
16 
16 
128 


IPMP P'^snriptorlD 
IPMPS Tvpe 
IPMP DescriptorlDbx 
IPMPJToollD 


OxFF 
OxFFFF 

The value assigned to the ISWIA 

lioi-fyptinn tool 




8 
8 


ControlPointCode 
SequenceCode 


6xb'l (between the decode buffer 

and the decoder) 

0x80 



Also the lOD must contain the following IPMPJOescriptorPoi^er. 1° 

it^^s that the specific DRM tool (Key Management System) mdicated m the 
referenced descriptor must be instantiated at a global scope: 




The above IPMP DescriptoiPohiter points to aIPMP_Descriptor whose 
^^D^^riDExU 0x0001 . Then the specified IPMP.D^ptor mu« be 
prS«i in lOD. Note for the KMS. the descriptor's s contiolPomt should be set to 0x00 
to indicate a global scope. 




8 
16 



16 



128 



IPMP Dgscri ptorlD 
IPMPS Type 



IPMP DescriptorlDEx 



IPMP_ToollD 
ControlPointCode 



OxFFFF 



0x0001 



The value assigned by each service 
provider to their KSM too l 



3.6 J Carriage of ISMACiyp data in an IPMP Extension compatible way 

ISMACryp uses a set of parameters to describe the encijjtion 

carry parimeters carried in an IPMP Extension compatible way. an ISMACryp_Data can 
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be extended from the IPMP-X defined lPMP_DataJBaseClass. IPMP_Daia_BaseClass is 
defined in MPEG-4 IPMPX as shown below: 

abstract aligned(8) expandable (2-28-1) class IMlP_Data_Ba5eCla3Si 
bit (8) tag-O .. 2SS 



( 



bit (8) Version; 
bit (32) datalD; 

// Fields and data extending this message. 



ISMACiyp_Data can extend from the above base dass using a user-defined tag. The data 
can then have its own set of fields to cany the parameters. This can ensure 
interoperabiUty of different ISMA terminals interpreting the same content stream. 

This ISMACtyp Data can be carried in two places in a standard way. The first is to cany 
it m IPMP Descriptor. The example of an IPMP Descriptor with this ISMACryp_Data is 
shown below: 



Descrim 
Field 
NO. 


tor Name 
Size in 
Bits 


ReldName 


Value 






IPMP DescrlDtor 


1 


8 


IPMP Descritrtortaq 


11 


2 


8 


descriptor size 


23 


3 


8 


IPMP DescriptorlD 


OxFF 


4 


16 


IPMPS Type 


OxFFFF 


5 


16 


IPMP DescriptorlDEx 


0x0002 / 0x0003 


6 


128 


IPMP_ToollD 


The value assigned to the ISMA 
decrvption tool 


7 


8 


ControlPointCode 


0x01 (between the decode buffer 
and the decoder) 


8 


8 


SeauenceCode 


0x80 






ISMACryp_Data 


I 

to be defined 


7 
8 


8 
8 


ISMACrvp DataTag 

data size 


20 


9 


8 


Cioher-suite 


Cipher identifier 


11 


4 


tV-length 


Bvte lenqth of the initialization vector 


12 


2 


Delta-IV-lenath 


Bvte lenqth of the IV on an AU basis 


13 


1 


Selective-encryption 


1 If selective encryption is used 


14 


1 


Key-irttlicator-perTAu 


1 if multiple key indicators appear in 
a packet 


IS 


e 


jKev-lndlcator-length 


Bvte length of the key indicator 



The second way to carry the ISMACiypJJata is to cany it as a P^V^^J^ 
IPMP_Message which is subsequently carried in IPMP Stream as defined m 
IPMP Extmsion. 



8 
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aligned(8) expandable (2"-l) cla33 IPMP.Message 

^ bit ( 1 6) IPMPS_Type ; 
if (IPMPSJType = 0) 

bit (8) UBi;3txing[sizeOfInstance-21? 
else (if (IPMPSJType 0x0001) 

bit (16) IPMP DescriptorlD; 

IPMP_Data3aseClass iPMP^ExtendedData [ ) 

^bit (8^ IPMPjdat a [ sizeOf Inst ance-2 ) ; 



foUowing example shows the ^V"*^/ .^^^^^^J^J:" ^"TS 
ISMACryp Data. The IPMP tool specified m Ae IPMP Descnptor wnn ims 
IPMP JD^^torlDEx is the destination of the IPMP_Message. 



Reld 
No. 



Size in 
Bits 



Field Name 



Value 



IPMP Message 



1© 



message size 
IPMPS Type 



16 



0x0001 



IPM P DescriptorlDEx 

ISMACryp Data 



ISMAC 

data size 
CiPher-suite 



PataTas 



to be defined 

20 

Cipher identifier 



7 



9 



iV-lenqth 
Delta-IV-length 



Selecftve-encrvption 



Key-indlcator-per-Au 




B yte length of the initialization vector 
Byte length of the IV on an AU basis 



if selective encryption is used 



1 if multiple key indicators appear in 
a padcet 



3.7 Effects of bivaition 

me invention uses the tool list in lOD and IPMP Descriptor in OD to ^^^^^ 
pr<iection. By doing so, the signalling method can be made flf^^^^TlX 
S^ble ^ tte latest MPEG-4 IPMP Extension standard, hence makes the MPEG- 
system-capable ISMA receivers interoperable. 

nris invention also creates an ISMACryp_Data extending from IPMP_Data_Baseaass 
m 1^^ K^Cryp Data can be^ to carry the ISN^Cryp parameters, and 
lahs^Vhe earned dther in IPMP Descriptor or ffMP Stieam. The caxruige of 
ISMACryppaiameters now become MPEG-4 IPMP Extension comphanL 

9 
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4 BRIEF DiSCRIPnON OF THE DRAWINGS 
Figure 1 shows ISMACiyp Architecture 
Figure 2 shows the MPECM IPMP Extenaon content stiucture. 
Figure 3 shows the protection signaling using IPMP Descriptor 
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lOD 



f IPMP Tool" Ust 



Content Stream 
( OP Stream 

( IPMP Stream 



c 



Content 
■ Stream^ s> 




Tool IDs 



(parametric Description 
Attemative Tool IDs 




(^J^^ ( infom^ativeURLj 

V PescfiPtor(s) ^ /^N^ ^ 

( IPMP Descfiptor(s) ^ 



IPMP Data 




IPMP Control Giapli 

ODA ODB 




Tool Control IPMP 
ID Points Into 



Various IPMP Data 

( Opaque Data ) 
( Key Data ) 
( Rights Date ) 
( Toot Init Data ) 



Figure 2: MPEG-4 IPMP Extension content structure. 
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CD=A 



ESD=B 



IPM> 



MCBOBL 



ESD=C ^ 1 
VI CEO/ 

I 1PM» PTR 



TdL ID 09 
I iraPDBta"] 




a>E 



ESD=F 



<6.2r 



I |p^p FTR 



IRyD6CR=Y 



TOO. ID(V) 

i IRVPDBtal 



(unprotected) 



VICB^a. STPEAM 
(encrypted) 



(encrypted) 



Figure 3: Protection signaling using IPMP Descriptor 
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6 ABSTRACT 

^3 invention dges^ si^^^^^ 

protection m MPEG ^^^l^^°J^^^Esm U ^ ^vith the latest MPEG-4 

piSvidesaflexibleTvay to tdeiitify tools 

(Fig-1) 
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